Re: svn commit: r239569 - head/etc/rc.d

看板FB_security作者時間13年前 (2012/09/12 16:01), 編輯推噓0(000)
留言0則, 0人參與, 最新討論串90/145 (看更多)
On 09/11/2012 04:20 AM, Ian Lepore wrote: > On Mon, 2012-09-10 at 22:46 -0700, David O'Brien wrote: >> >>> -r just changes the sort order, which is probably pointless. >> >> I'm not wedded to "-r", but since you're proposing this to not use "-r", >> which Ian Lepore suggested after instrumenting /etc/rc.d/initrandom and >> looking at the output, please show a diff of two boots with "-r" and >> without "-r" so can see what the change really is. >> > > I observed that the order of displayed processes could differ from one > reboot to the next, even on an embedded system where little else > differed. It seemed to me that a difference in order, while small, > might be significant. Yes, even small changes that early in the process help with the replay scenario, even if they don't feed a large amount of unique entropy into the device. Doug _______________________________________________ freebsd-security@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-security To unsubscribe, send any mail to "freebsd-security-unsubscribe@freebsd.org"
文章代碼(AID): #1GK44_nA (FB_security)
討論串 (同標題文章)
文章代碼(AID): #1GK44_nA (FB_security)